Amendments to the Claims : 


This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims : 
Claims 1-28 (canceled). 

29. (Currently amended) A method for assisting a user in verifying a cast ballot B cast stored 

in a server, the method comprising: 

forming a digital signature of B cast using a server side private key of the server DS(B cast , 
s) by a first server side computer software application process tangibly embodied 
in a physical program storage device executable by a server side physical 
computer hardware machine and executing on the server side physical computer 
hardware machine ; 

associating the B cast and DS(B cast , s) with a vote serial number VSN by a second server 
side computer software application process tangibly embodied in a physical 
program storage device executable by the server side physical computer hardware 
machine and executing on the server side physical computer hardware machine ; 

forming a confirmation token, comprising DS(B cast , s) and VSN by a third server side 

computer software application process tangibly embodied in a physical program 
storage device executable by the server side physical computer hardware machine 
and executing on the server side physical computer hardware machine ; 

making the confirmation token available by a fourth server side computer software 
application process tangibly embodied in a physical program storage device 
executable by the server side physical computer hardware machine and executing 
on the server side physical computer hardware machine to a first client side 
computer software application process tangibly embodied in a physical program 
storage device executable by a client side physical computer hardware machine 
and executing on the client side physical computer hardware machine of a user 
via a network ; 
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receiving a the confirmation token made available to a the user by a fifth server side 

computer software application process tangibly embodied in a physical program 
storage device executable by the server side physical computer hardware machine 
and executing on the server side physical computer hardware machine from a 
second client side computer software application process tangibly embodied in a 
physical program storage device executable by the client side physical computer 
hardware machine and executing on the client side physical computer hardware 
machine via the network ; 

extracting VSN reC eived token and DS re ceivedtoken(B cast , s) from the received token by a sixth 

server side computer software application process tangibly embodied in a physical 
program storage device executable by the server side physical computer hardware 
machine and executing on the server side physical computer hardware machine ; 

for VSN equal to VSN rece ived token, comparing DS reC eivedtoken(B cas t, s) and at least one of 
DS(B cast , s) and DS(B cast , S) by a seventh server side computer software 
application process tangibly embodied in a physical program storage device 
executable by the server side physical computer hardware machine and executing 
on the server side physical computer hardware machine ; and 

if the comparison shows equivalence between the data compared, determining that B cast is 
verified by an eighth server side computer software application process tangibly 
embodied in a physical program storage device executable by the server side 
physical computer hardware machine and executing on the server side physical 
computer hardware machine if the comparison shows equivalence between the 
data compared . 

(Previously presented) The method of Claim 29 wherein: 

the confirmation token further comprises a digital signature of an aggregation comprising 
the associated B cast and VSN using the server's server side private key 
DS(Aggregation, s); 

extracting DS reC eived token (Aggregation, s) from the received token; and 


B cas t is verified only upon the additional condition that DS reC eived token (Aggregation, s) is 
equivalent to DS(Aggregation, s). 

3 1 . (Currently amended) A method for assisting a user in verifying a cast ballot recorded in a 
server, the method comprising: 

receiving in by a first server side computer software application process tangibly 
embodied in a physical program storage device executable by a server side 
physical computer hardware machine and executing on the server side physical 
computer hardware machine at least one set of: 

a cast ballot B cast and 

a digital signature of B cast formed with the private key of a voter casting the ballot 
DS(B cast , v); 

forming by a second server side computer software application process tangibly 

embodied in a physical program storage device executable by the server side 
physical computer hardware machine and executing on the server side physical 
computer hardware machine : 

a digital signature of B cast using a server side private key of the server DS(B cast , s), 

associating B cast , DS(B cast , v), and DS(B cast , s) with a vote serial number VSN; 

forming by a third server side computer software application process tangibly embodied 
in a physical program storage device executable by the server side physical 
computer hardware machine and executing on the server side physical computer 
hardware machine a confirmation token, comprising: 

DS(B cast , s), DS(B cast , v), VSN, and DS(Aggregation, s), 

where DS (Aggregation, s) is the digital signature of the aggregation of the 
associated B cast , DS(B cast , v), DS(B cast , s), and VSN; 
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making the confirmation token available by a fourth server side computer software 
application process tangibly embodied in a physical program storage device 
executable by the server side physical computer hardware machine and executing 
on the server side physical computer hardware machine to a first client side 
computer software application process tangibly embodied in a physical program 
storage device executable by a client side physical computer hardware machine 
and executing on the client side physical computer hardware machine of a user 
via a network ; 

receiving a the confirmation token by a fifth server side computer software application 

process tangibly embodied in a physical program storage device executable by the 
server side physical computer hardware machine and executing on the server side 
physical computer hardware machine from a second client side computer software 
application process tangibly embodied in a physical program storage device 
executable by the client side physical computer hardware machine and executing 
on the client side physical computer hardware machine via the network ; 

extracting VSN reC eived token and at least One Of DS re ceivedtoken(B cas t, S), DS reC eivedtoken(B C ast, v), 

and DS reC eivedtoken(AG, s) from the received token by a sixth server side computer 
software application process tangibly embodied in a physical program storage 
device executable by the server side physical computer hardware machine and 
executing on the server side physical computer hardware machine ; and 

for VSN re ceived token and the corresponding VSN, comparing by a seventh server side 

computer software application process tangibly embodied in a physical program 
storage device executable by the server side physical computer hardware machine 
and executing on the server side physical computer hardware machine at least one 
of: 

DS reC e 1 vedtoken(B cas ,, s) and DS(B cast , S)j 

DS reC e 1 ved,oken(B cast , v), and DS(B cast , v); 


DS reC eivedtoken(Aggregation, s), and DS (Aggregation, s); 


if comparison shows equivalence between the data compared, determining that B cast is 
verified by an eighth server side computer software application process tangibly 
embodied in a physical program storage device executable by the server side 
physical computer hardware machine and executing on the server side physical 
computer hardware machine if comparison shows equivalence between the data 
compared . 

32. (Previously presented) The method of Claim 3 1 further comprising: 

if comparison shows equivalence between DS reC eivedtoken( Aggregation, s), and 

DS(Aggregation, s), determining that the received confirmation token has not 
been modified since its formation. 

33. (Currently amended) A method for assisting a user verifying a cast ballot recorded in a 
server, the method comprising: 

receiving a cast ballot ("Bcast ") in by a first server side computer software application 
process tangibly embodied in a physical program storage device executable by a 
server side physical computer hardware machine and executing on the server side 
physical computer hardware machine ; 

forming a digital signature of Bcast using a server side private key of the server 

("DS(Bcast , s)") by a second server side computer software application process 
tangibly embodied in a physical program storage device executable by the server 
side physical computer hardware machine and executing on the server side 
physical computer hardware machine ; 

associating Bcast and DS(Bcast , s) with a vote serial number ("VSN") by a third server 
side computer software application process tangibly embodied in a physical 
program storage device executable by the server side physical computer hardware 
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machine and executing on the server side physical computer hardware machine ; 


for VSN, comparing DS(Bcast , s) and DS(Bcast , S) by a fourth server side computer 
software application process tangibly embodied in a physical program storage 
device executable by the server side physical computer hardware machine and 
executing on the server side physical computer hardware machine ; 

if comparison shows equivalence between the data compared, determining that Beast is 
verified by a fifth server side computer software application process tangibly 
embodied in a physical program storage device executable by the server side 
physical computer hardware machine and executing on the server side physical 
computer hardware machine if the comparison shows equivalence between the 
data compared . 
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